Contributions from ConsortiumGARR fork: new settings, hide login and CI pipeline

How to use GitHub

• Please use the 👍 reaction to show that you are interested into the same feature.
• Please don't comment if you have no relevant information to add. It's just extra noise for everyone subscribed to this issue.
• Subscribe to receive notifications on status change and new comments.

---

Feature request

Which Nextcloud Version are you currently using: 33.0.0

Is your feature request related to a problem? Please describe.

We've been maintaining a fork of user_oidc with several additions to cover use cases we needed in production. Before investing time in cleaning up the code for a proper PR, we'd like to know if you'd be interested in accepting contributions in these areas.

Describe the solution you'd like

The full implementation is available in our fork at ConsortiumGARR/user_oidc. Here is a summary of what we've added:

---

CI pipeline with krankerl

Automated build and packaging pipeline using krankerl via krankerl-builder. The pipeline also includes automatic GitHub release creation, with the krankerl build attached as a release asset.

---

Hide default Nextcloud login

Reworked approach to hide the native Nextcloud login form using IAlternativeLogin, as suggested in the existing comment at Application.php#L125. The behavior is toggleable from admin settings. The approach is inspired by nextcloud-social-login.

---

New provider settings

Setting	Description
new-users-require-approval	Require administrator approval (enable them) for new users after first login
group-forbid-login-without-group	Forbid login for users not member of any group provided by the OIDC group claim
mapping-group-admin-for	Attribute mapping for subadmin group provisioning
appearance-icon	Custom login button icon in base64 format
appearance-button-background-color	Custom login button background color

---

Additional context

(screenshots attached for the hide default login feature)

or /login#body-login